COOEY // HUBcompliance · community · intelligence

FAIL › dossier

Confluence Server and Data Center product

2
failure events
0
zero-days
2
RCEs
2
on KEV
1
critical
95
worst shame

Dossier not yet built — the RAG curator builds one for players with ≥2 failure events (factory/dossier.py). The failure history and sentiment below are live.

Failure history 2 events

DateEventSevFlagsShameSummary
2021-11-03 CVE-2021-26084 critical ⚡RCE ⌖KEV 95 Atlassian Confluence Server and Data Server contain an Object-Graph Navigation Language (OGNL) injection vulnerability that may allow an unauthenticated attacker to execute code.
2021-11-03 CVE-2019-3398 high ⚡RCE ⌖KEV 65 Atlassian Confluence Server and Data Center contain a path traversal vulnerability in the downloadallattachments resource that may allow a privileged, remote attacker to write files. Exploitation can lead to remote code execution.